Manitest: Are classifiers really invariant?
Not on the map. Why?
Abstract (arXiv)
Invariance to geometric transformations is a highly desirable property of automatic classifiers in many image recognition tasks. Nevertheless, it is unclear to which extent state-of-the-art classifiers are invariant to basic transformations such as rotations and translations. This is mainly due to the lack of general methods that properly measure such an invariance. In this paper, we propose a rigorous and systematic approach for quantifying the invariance to geometric transformations of any classifier. Our key idea is to cast the problem of assessing a classifier's invariance as the computation of geodesics along the manifold of transformed images. We propose the Manitest method, built on the efficient Fast Marching algorithm to compute the invariance of classifiers. Our new method quantifies in particular the importance of data augmentation for learning invariance from data, and the increased invariance of convolutional neural networks with depth. We foresee that the proposed generic tool for measuring invariance to a large class of geometric transformations and arbitrary classifiers will have many applications for evaluating and comparing classifiers based on their invariance, and help improving the invariance of existing classifiers.
Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). First posted on arXiv 23 Jul 2015.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 12; 2022: 10; 2023: 4; 2024: 0; 2025: 1.
27 papers.
Sort:
By area:
- 2021Editing a classifier by rewriting its prediction rulescited by 65
- 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safetycited by 35
- 2022Just Rotate it: Deploying Backdoor Attacks via Rotation Transformationcited by 20
- 2023Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspectivecited by 20
- 2023A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attackscited by 19
- 2022CausalAgents: A Robustness Benchmark for Motion Forecasting using Causal Relationshipscited by 18
- 2021Scale-invariant scale-channel networks: Deep networks that generalise to previously unseen scalescited by 17
- 2021Adversarial Examples on Segmentation Models Can be Easy to Transfercited by 15
- 2021Relative stability toward diffeomorphisms indicates performance in deep netscited by 12
- 2021Anti-aliasing Deep Image Classifiers using Novel Depth Adaptive Blurring and Activation Functioncited by 11
- 2022Measuring Representational Robustness of Neural Networks Through Shared Invariancescited by 11
- 2021AGKD-BML: Defense Against Adversarial Attack by Attention Guided Knowledge Distillation and Bi-directional Metric Learningcited by 10
15 more
- 2022Adversarially Robust Learning with Tolerancecited by 9
- 2021Contemplating real-world object classificationcited by 6
- 2021Generating Unrestricted Adversarial Examples via Three Parameterscited by 5
- 2022Certifying Model Accuracy under Distribution Shiftscited by 5
- 2022How deep convolutional neural networks lose spatial information with trainingcited by 5
- 2023Exploring Robust Features for Improving Adversarial Robustnesscited by 4
- 2022Generalization to translation shifts: a study in architectures and augmentationscited by 3
- 2021Natural Perturbed Training for General Robustness of Neural Network Classifierscited by 2
- 2021SHIFT15M: Fashion-specific dataset for set-to-set matching with several distribution shiftscited by 2
- 2022Resource-Efficient Invariant Networks: Exponential Gains by Unrolled Optimizationcited by 2
- 2025An Analysis of Causal Effect Estimation using Outcome Invariant Data Augmentationcited by 2
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbationscited by 1
- 2023Invariance Measures for Neural Networkscited by 1
- 2021Wiggling Weights to Improve the Robustness of Classifierscited by 0
- 2022Potential Auto-driving Threat: Universal Rain-removal Attackcited by 0
- 2025An Analysis of Causal Effect Estimation using Outcome Invariant Data Augmentation29 Oct 2025
- 2023Invariance Measures for Neural Networks26 Oct 2023
- 2023A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks1 Oct 2023
- 2023Exploring Robust Features for Improving Adversarial Robustness9 Sep 2023
- 2023Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective19 Feb 2023
- 2022Potential Auto-driving Threat: Universal Rain-removal Attack18 Nov 2022
- 2022How deep convolutional neural networks lose spatial information with training4 Oct 2022
- 2022Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation22 Jul 2022
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbations13 Jul 2022
- 2022CausalAgents: A Robustness Benchmark for Motion Forecasting using Causal Relationships7 Jul 2022
- 2022Generalization to translation shifts: a study in architectures and augmentations5 Jul 2022
- 2022Measuring Representational Robustness of Neural Networks Through Shared Invariances23 Jun 2022
15 more
- 2022Resource-Efficient Invariant Networks: Exponential Gains by Unrolled Optimization9 Mar 2022
- 2022Adversarially Robust Learning with Tolerance2 Mar 2022
- 2022Certifying Model Accuracy under Distribution Shifts28 Jan 2022
- 2021Editing a classifier by rewriting its prediction rules2 Dec 2021
- 2021Adversarial Examples on Segmentation Models Can be Easy to Transfer22 Nov 2021
- 2021Wiggling Weights to Improve the Robustness of Classifiers18 Nov 2021
- 2021Anti-aliasing Deep Image Classifiers using Novel Depth Adaptive Blurring and Activation Function3 Oct 2021
- 2021SHIFT15M: Fashion-specific dataset for set-to-set matching with several distribution shifts30 Aug 2021
- 2021AGKD-BML: Defense Against Adversarial Attack by Attention Guided Knowledge Distillation and Bi-directional Metric Learning13 Aug 2021
- 2021Scale-invariant scale-channel networks: Deep networks that generalise to previously unseen scales11 Jun 2021
- 2021Relative stability toward diffeomorphisms indicates performance in deep nets6 May 2021
- 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety29 Apr 2021
- 2021Natural Perturbed Training for General Robustness of Neural Network Classifiers21 Mar 2021
- 2021Generating Unrestricted Adversarial Examples via Three Parameters13 Mar 2021
- 2021Contemplating real-world object classification8 Mar 2021
- 2021Editing a classifier by rewriting its prediction rulescited by 65
- 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safetycited by 35
- 2022Just Rotate it: Deploying Backdoor Attacks via Rotation Transformationcited by 20
- 2023Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspectivecited by 20
- 2023A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attackscited by 19
- 2022CausalAgents: A Robustness Benchmark for Motion Forecasting using Causal Relationshipscited by 18
- 2021Scale-invariant scale-channel networks: Deep networks that generalise to previously unseen scalescited by 17
- 2021Adversarial Examples on Segmentation Models Can be Easy to Transfercited by 15
- 2021Relative stability toward diffeomorphisms indicates performance in deep netscited by 12
- 2021Anti-aliasing Deep Image Classifiers using Novel Depth Adaptive Blurring and Activation Functioncited by 11
- 2022Measuring Representational Robustness of Neural Networks Through Shared Invariancescited by 11
- 2022Adversarially Robust Learning with Tolerancecited by 9
12 most cited of 26 All 26 (JSON)
- 2025An Analysis of Causal Effect Estimation using Outcome Invariant Data Augmentation29 Oct 2025
- 2023Invariance Measures for Neural Networks26 Oct 2023
- 2023A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks1 Oct 2023
- 2023Exploring Robust Features for Improving Adversarial Robustness9 Sep 2023
- 2023Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective19 Feb 2023
- 2022Potential Auto-driving Threat: Universal Rain-removal Attack18 Nov 2022
- 2022How deep convolutional neural networks lose spatial information with training4 Oct 2022
- 2022Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation22 Jul 2022
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbations13 Jul 2022
- 2022CausalAgents: A Robustness Benchmark for Motion Forecasting using Causal Relationships7 Jul 2022
- 2022Generalization to translation shifts: a study in architectures and augmentations5 Jul 2022
- 2022Measuring Representational Robustness of Neural Networks Through Shared Invariances23 Jun 2022
12 newest of 26 All 26 (JSON)